mirashii

20 ms·

301.
by mirashii 5y ago
This is a pretty shallow dismissal that doesn't actually provide data to back up the claim. Why would the interference be substantial enough to make them useless? Which weather and maritime radar? There are many at many different bands
302.
by mirashii 5y ago
Let's try simpler: No code that runs under the GIL is ever run concurrently. All of the code in the example holds the GIL, there's never any concurrency in your article! With no concurrency, there can be no data race.
303.
by mirashii 5y ago
There's plenty of reading in the set of links in the grandparent, so maybe I can just quickly clarify. When we speak of concurrency and data races, we're speaking about concurrent accesses to a particular memory location, where co
304.
by mirashii 5y ago
> The Python example has two concurrent accesses of the same memory (the global counter) where one of them is a write. That seems to meet the definition. Ah, but no, there is never concurrent access to that memory address, that's wh
305.
by mirashii 5y ago
This seems like a baseless assumption. Unless you have evidence actually suggesting otherwise, try assuming good faith. 1Pass isn’t incentivized to make decisions that compromise security.
306.
by mirashii 5y ago
I wouldn’t attribute this to progress. iOS and macOS have always heavily prioritized accessibility. For Google, you can see in this example and in the flutter example that accessibility is an after thought.
307.
by mirashii 5y ago
Pieces of how this happened, and some of the fixes implemented, don't instill much confidence. Amongst other issues, this was triggered by a lack of case-insensitive handling of the HTTP "Content-Length" header. https:/
308.
by mirashii 5y ago
Solar panels have an albedo of ~0.3. Asphalt around ~0.05. That makes it 6x better in terms of heat reflected back right out the gate. There are many other, more complicated factors that make this even better in practice.
309.
by mirashii 5y ago
Blink is a part of Chromium, but not really a decoupled part. Having blink without the rest of Chromium isn't really possible at this time. Some details at https://www.chromium.org/blink https://www.chromium
310.
by mirashii 5y ago
I was going to point out a similar thing. I was a contributor for a few years in the mid-2000s
311.
by mirashii 5y ago
> Automattic itself doesn't have to abide by GPL terms for whatever use they want to make of Wordpress Yes they do. Automatic doesn’t own the copyright to all the code. Individual contributions are still copyrighted and licensed und
312.
by mirashii 5y ago
Bitmaps are special in that they don’t require a decompression step, so of course they don’t have the overhead of a decompression step.
313.
by mirashii 5y ago
screen had a recent RCE of the sort. https://nvd.nist.gov/vuln/detail/CVE-2021-26937
314.
by mirashii 5y ago
https://blog.mozilla.org/addons/2021/05/27/manifest-v3-updat... > We will support blocking webRequest until there’s a better solution which covers all use cases we consider important, since DNR as cur
315.
by mirashii 5y ago
I believe this community fully understands everything in your post, and believes Electron is a bad decision anyways. Why? Because when we're talking about these things, we're *users*. As a user, I don't care how easy it was f
316.
by mirashii 5y ago
That doesn't prevent a malicious FaceID chip from recording and replaying sensor output, allowing a backdoor to unlock the phone, or a variety of other attacks. There's a security guide that talks more about what the threat model
317.
by mirashii 5y ago
I'm a little disappointed that the article didn't answer the question, or at least try to. A discussion of using read/write vs mincore vs trying to catch a SIGSEGV would've been a nice addition.
318.
by mirashii 5y ago
If you're referring to the Metreon target, this is some good old fashioned fake news. https://hoodline.com/2021/10/false-claim-of-target-closing-m...
319.
by mirashii 5y ago
The problem is that fail2ban or any sort of dropping of packets at the host is too late, the volume has overloaded the link.
320.
by mirashii 5y ago
As far as I'm aware, there is none, though the EARN IT act that passed the Senate last year would have brought us closer by opening a company to liability if they provide E2E encryption without a mechanism for CSAM detection. https:&#
321.
by mirashii 5y ago
> By default, all modern Android apps only trust CA system certificates, and on a normal device you cannot change those. Sure you can. It's in a settings pane, Settings -> Security -> Encryption and Credentials -> Install a
322.
by mirashii 5y ago
> The board spent time (whilst schools were closed) deciding how to rename schools, something which has zero impact on educational outcomes. I'd like to expand on this one, as it's been a particular frustrating one. It launched
323.
by mirashii 6y ago
> social media's desperate attempt to appease new government to prevent strong legislation, such as being held liable for their user's content That's an interesting hypothesis, but doesn't really stand up to scrutiny.
324.
by mirashii 6y ago
But that's not what file_get_contents does.
325.
by mirashii 6y ago
> You said "there is never a legitimate need to do X". No, he didn't, and to use quotes to claim someone said something that they didn't say is extremely disingenuous.
326.
by mirashii 6y ago
Billing records in particular are highly sought after as they allow existing identity theft schemes, like tax return fraud, to be amplified to a much higher level. If you can find individuals who have undergone expensive treatments that wil
327.
by mirashii 6y ago
> This is a wild exaggeration. It isn't. I get that experience as a pentester can make you jaded to security practices, but the healthcare space is extremely regulated and much of what the grandparent said is a direct result of that
328.
by mirashii 6y ago
There's really no reason to be disappointed. The post above both isn't about any real vulnerabilities in the service, and does not have any real solutions to the problems posed.
329.
by mirashii 6y ago
I've had good luck with Wiha tools.
330.
by mirashii 7y ago
I worked at a company that with a fleet of microsatellites that also built and managed our own network of groundstations. The costs of groundstations can definitely add up. Scouting for locations with good RF properties takes a lot of long

More ›